extern/shorewall_code
1
0
Fork 1
mirror of https://gitlab.com/shorewall/code.git synced 2025-01-20 12:39:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

More fussing around with Xen My Way

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@3708 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-03-21 02:02:44 +00:00
parent 7b5f002976
commit 1db060726f
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
docs/XenMyWay.xml
View File

@ -279,7 +279,7 @@ done</programlisting>
</section> </section>
<section id="Dom0"> <section id="Dom0">
<title>Dom0 Configuration</title> <title>Dom0 Shorewall Configuration</title>
<para>The goals for the Shorewall configuration in Dom0 are as <para>The goals for the Shorewall configuration in Dom0 are as
follows:</para> follows:</para>
@ -349,7 +349,7 @@ SECTION NEW
</section> </section>
<section id="Firewall"> <section id="Firewall">
<title>Firewall DomU Configuration</title> <title>Firewall DomU Shorewall Configuration</title>
<para>In the firewall DomU, I run a conventional three-interface <para>In the firewall DomU, I run a conventional three-interface
firewall with Proxy ARP DMZ -- it is very similar to the firewall firewall with Proxy ARP DMZ -- it is very similar to the firewall
@ -970,9 +970,10 @@ SECTION NEW
<blockquote> <blockquote>
<para><filename>/etc/openvpn/server-bridge</filename> (Note that I <para><filename>/etc/openvpn/server-bridge</filename> (Note that I
prefer to push two /1 routes rather than to use the <emphasis prefer to push two /1 routes rather than to use the <emphasis
role="bold">redirect-gateway</emphasis> directive; I find that the role="bold">redirect-gateway</emphasis> directive on the client
latter occasionally leaves the remote system with <emphasis systems; I find that the latter occasionally leaves the remote system
role="bold">no</emphasis> default gateway):</para> with <emphasis role="bold">no</emphasis> default gateway while my
approach always works):</para>
<programlisting>dev tap0 <programlisting>dev tap0
@ -1011,7 +1012,7 @@ verb 3
push "route 0.0.0.0 128.0.0.0 192.168.1.254" push "route 0.0.0.0 128.0.0.0 192.168.1.254"
push "route 128.0.0.0 128.0.0.0 192.168.1.254"</programlisting> push "route 128.0.0.0 128.0.0.0 192.168.1.254"</programlisting>
<para><filename>/etc/bridge-clients/tipper.shorewall.net</filename> <para><filename>/etc/openvpn/bridge-clients/tipper.shorewall.net</filename>
(used to assign a fixed IP address to clients -- there are other (used to assign a fixed IP address to clients -- there are other
similar files in this directory):</para> similar files in this directory):</para>